One account. Files you choose.

Vaultory is an independent backup website. It does not read a phone’s contacts, messages, or call history. To store those records, first export them using an app you trust, then select that file yourself.

Create and recover your account

1. Create an account using your email address or phone number as its identifier.
2. Generate your vault key and download the digital SVG recovery card. It contains your account identifier and full vault key. Keep it privately, outside the device you might lose. You can open the SVG in a browser and print it.
3. Choose an available direct tier in your account, create an order and upload payment proof, or activate with an existing distributor code.
4. Choose a file to encrypt and upload. Use the same identifier and vault key on another device to download it.

Email addresses and phone numbers are self-declared identifiers in this version. There is no Google sign-in, email verification, or SMS verification. Use your generated vault key here, never your email account password.

Your vault key decrypts your files and cannot be reset to recover them. Keep it private and never give it to a distributor. The site stores an authentication verifier, encrypted file metadata, and encrypted file chunks. The key and decrypted file contents are held in your browser while you use the service.

View, export, and print

Any file can be uploaded and downloaded in its original format, up to 256 MB per file. Images (PNG, JPEG, WebP and GIF), PDF files and plain text can be previewed on this device. The record viewer supports Open Host JSON, ordinary text vCard contacts, and SMS Backup & Restore XML containing SMS or call records. It displays the records present in the selected file, including full SMS text. MMS attachments, encrypted exports from other apps, and encoded legacy vCards may need their original software.

Preview is limited to 32 MB and 200,000 records. Search filters the current section. CSV export and printing include every matching record, across all preview pages. Downloading an original export does not automatically import it into the phone; use the compatible restore app.

Open Host JSON uses the following structure. These are fictional sample records, not a phone backup.

{
  "format": "open-host-v1",
  "calls": [
    {
      "name": "Sample Contact",
      "number": "+12025550101",
      "type": "Outgoing",
      "date": "2026-10-01T10:00:00Z",
      "duration": 90
    }
  ],
  "messages": [
    {
      "name": "Sample Contact",
      "number": "+12025550101",
      "type": "Received",
      "date": "2026-10-01T10:05:00Z",
      "body": "Sample message — for a format example only."
    }
  ],
  "contacts": [
    {
      "name": "Sample Contact",
      "phones": [
        "+12025550101"
      ],
      "emails": [
        "sample@example.test"
      ]
    }
  ]
}

Distributor codes

The owner creates a one-time distributor invitation and assigns an allowance. A distributor claims the invitation, generates their own vault key, and creates activation codes within that allowance. Full codes are displayed once and can be exported to CSV. Unused codes expire after 90 days and can be revoked. Issuing or revoking a code does not restore allowance.

A customer code is redeemed once by one account. It adds 30 or 365 days of upload access, with a 1 GB account storage allowance. Renewals extend time; they do not add another 1 GB. Completed backups remain downloadable after upload access expires. The owner manually verifies direct-order payments. Automated bank, wallet and card processing is not connected. Legacy distributor codes cannot renew a higher-capacity direct plan.

The card collection

CORE (100 GB), PRIME (500 GB), ELITE (1 TB), and SOVEREIGN (5 TB) are supported direct subscription capacities. The owner must set prices, payment instructions and support, and enable sales before orders can be created. After paying the exact order total, upload PNG, JPEG or PDF proof (up to 5 MB). The order stays under review until the owner checks the actual transfer and approves it. Approval activates capacity and duration once. Physical card delivery is optional only when enabled. Track preparation, shipment and delivery in your account. The shipped brand card does not expose your private vault key to staff; download your digital recovery card privately.

Current release and business roadmap

Vaultory provides individual encrypted vaults. Direct plans support the four capacities above; legacy distributor codes provide 1 GB. Both support 30- or 365-day terms. Renewal extends time rather than stacking capacity, and lower-capacity orders need support review. Shared company workspaces, employee permissions, document rooms, temporary sharing links and a recycle bin are not yet available. Deleting a file is permanent. See the service and privacy page for operational limits.

Administration

The owner console uses the site owner’s ChatGPT identity. It shows account registration metadata, distributor activations, commercial settings, direct orders, payment proof and shipping details. The owner can approve or reject payments and update manual fulfillment status, as well as manage distributor allowances and suspension. Distributors see their own code inventory and masked customer identifiers. Neither dashboard includes a customer backup reader or vault key.

Encryption protects stored content from ordinary dashboard and storage access. As with a browser-based encrypted service, the operator controls the code delivered by the website. Use a trusted deployment and keep your recovery card safe.